440ab6ff8ab4664455f1e3ceb0437ec478e351d1639dcd3eb6872f5a8be87f4a

Sharing

Copy URL

Twitter E-mail

General

Target

440ab6ff8ab4664455f1e3ceb0437ec478e351d1639dcd3eb6872f5a8be87f4a
Size

99KB
MD5

b17712982d76a3576fb7c377faf2035c
SHA1

42fdb749aeb04ed484e58d54eb4781ab6999ad64
SHA256

440ab6ff8ab4664455f1e3ceb0437ec478e351d1639dcd3eb6872f5a8be87f4a
SHA512

339587d4a9d6710d00a9ec96557c45bfe3523e96b62997e48980c32b71c3381afd0298e9a1a526009743e3ac8bb5353b5e03b2e23de44e6c0ac5d46d29c52cf7
SSDEEP

1536:RLsM1IeyH7Bs0mxXHkqBTT2ohVy/Pt9PpolTI38qPfnK2aYC:Rgey10Bn2ohVy/19BoisqPfnda1

Score

N/A

Malware Config

Signatures

Files

440ab6ff8ab4664455f1e3ceb0437ec478e351d1639dcd3eb6872f5a8be87f4a
.dll windows x86

d00f70a9d5ea1034f5563f2fc973ba60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
sprintf
wcslen
isprint

ntdll

RtlAnsiStringToUnicodeString
NtCreateFile
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlAllocateHeap
RtlInitString
RtlReAllocateHeap
RtlCopyUnicodeString
NtDeviceIoControlFile
RtlNtStatusToDosError
RtlFreeHeap
NtClose
NtWaitForSingleObject
RtlFreeUnicodeString
RtlInitAnsiString
NtOpenFile

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingW
UnmapViewOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrlenW
InterlockedIncrement
InterlockedDecrement
GetLastError
GetComputerNameA
HeapFree
CloseHandle
MapViewOfFile
GetSystemTimeAsFileTime

advapi32

ReportEventW
RegisterEventSourceA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
RegQueryValueExW
ReportEventA
RegOpenKeyExW

iphlpapi

GetIcmpStatistics
GetUdpStatistics
GetTcpStatistics
GetIpStatistics
GetNumberOfInterfaces
GetIfTable

Exports

Exports

CloseDhcpPerformanceData
CloseIPXPerformanceData
CloseNWNBPerformanceData
CloseNbfPerformanceData
CloseSPXPerformanceData
CloseTcpIpPerformanceData
CollectDhcpPerformanceData
CollectIPXPerformanceData
CollectNWNBPerformanceData
CollectNbfPerformanceData
CollectSPXPerformanceData
CollectTcpIpPerformanceData
OpenDhcpPerformanceData
OpenIPXPerformanceData
OpenNWNBPerformanceData
OpenNbfPerformanceData
OpenSPXPerformanceData
OpenTcpIpPerformanceData

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d00f70a9d5ea1034f5563f2fc973ba60

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 66KB - Virtual size: 66KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 66KB - Virtual size: 66KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB